FreeCalypso > hg > fc-sim-sniff
view README @ 58:95ed46b5f8f1 default tip
doc/Sniffing-hw-setup: mv-sniffer is here
author | Mychaela Falconia <falcon@freecalypso.org> |
---|---|
date | Wed, 04 Oct 2023 05:55:09 +0000 |
parents | f8c27c2bde0e |
children |
line wrap: on
line source
Welcome to FreeCalypso SIMsniff =============================== FreeCalypso SIMsniff is an alternative project to Osmocom SIMtrace, created in response to technical limitations of the latter. Both tools seek to solve the same problem (trace or sniff all communication between a phone, modem or other interface device and a SIM card) and use some passive hardware components in common (the FPC adapter cable that goes into the phone's SIM socket), but use different active components: Osmocom SIMtrace uses an AT91SAMx MCU as the ISO 7816-3 sniffing receiver, whereas FC SIMsniff uses a voltage translating buffer followed by an iCE40 FPGA instead. The principal practical difference between the two tools is that FC SIMsniff is electrically clean and proper: * The sniffing apparatus makes a strictly Hi-Z connection to the SIM bus being sniffed; * The SIM bus itself is solidly connected from the phone's SIM socket to the physical SIM without any switches or pull-ups or other Heisenbug-inducing artifacts; * The sniffing apparatus supports all 3 voltage classes that can be put out by the ME or other interface device: 1.8V, 3V and 5V are all good. The hardware setup of FC SIMsniff consists of: * The same SIMtrace FPC cables (going from a SIM socket to the 6-pin FPC connector) that were originally developed for SIMtrace1/2 and are sold by Sysmocom; * An off-the-shelf Lattice Icestick FPGA board; * A little bit of custom hardware: two very simple boards in the initial version, intending to consolidate them into one board in the final version, see doc/Sniffing-hw-setup for the details. This source repository contains: boards Design files for little adapter boards fpga Gateware for the iCE40HX1K FPGA on the Icestick board sw Host software tools